| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668 |
- -- init.lua
- --
- -- initialize wireshark's lua
- --
- -- This file is going to be executed before any other lua script.
- -- It can be used to load libraries, disable functions and more.
- --
- -- Wireshark - Network traffic analyzer
- -- By Gerald Combs <gerald@wireshark.org>
- -- Copyright 1998 Gerald Combs
- --
- -- SPDX-License-Identifier: GPL-2.0-or-later
- -- Set enable_lua to false to disable Lua support.
- enable_lua = true
- if not enable_lua then
- return
- end
- -- If set and Wireshark was started as (setuid) root, then the user
- -- will not be able to execute custom Lua scripts from the personal
- -- configuration directory, the -Xlua_script command line option or
- -- the Lua Evaluate menu option in the GUI.
- run_user_scripts_when_superuser = true
- function typeof(obj)
- local mt = getmetatable(obj)
- return mt and mt.__typeof or obj.__typeof or type(obj)
- end
- -- the following function checks if a file exists
- -- since 1.11.3
- function file_exists(name)
- local f = io.open(name,"r")
- if f ~= nil then io.close(f) return true else return false end
- end
- -- the following function prepends the given directory name to
- -- the package.path, so that a 'require "foo"' will work if 'foo'
- -- is in the directory name given to this function. For example,
- -- if your Lua file will do a 'require "foo"' and the foo.lua
- -- file is in a local directory (local to your script) named 'bar',
- -- then call this function before doing your 'require', by doing
- -- package.prepend_path("bar")
- -- and that will let Wireshark's Lua find the file "bar/foo.lua"
- -- when you later do 'require "foo"'
- --
- -- Because this function resides here in init.lua, it does not
- -- have the same environment as your script, so it has to get it
- -- using the debug library, which is why the code appears so
- -- cumbersome.
- --
- -- since 1.11.3
- function package.prepend_path(name)
- -- get the function calling this package.prepend_path function
- local dt = debug.getinfo(2, "f")
- if not dt then
- error("could not retrieve debug info table")
- end
- -- get its upvalue
- local _, val = debug.getupvalue(dt.func, 1)
- if not val or type(val) ~= 'table' then
- error("No calling function upvalue or it is not a table")
- end
- -- get the __DIR__ field in its upvalue table
- local dir = val["__DIR__"]
- -- get the platform-specific directory separator character
- local sep = package.config:sub(1,1)
- -- prepend the dir and given name to path
- if dir and dir:len() > 0 then
- package.path = dir .. sep .. name .. sep .. "?.lua;" .. package.path
- end
- -- also prepend just the name as a directory
- package.path = name .. sep .. "?.lua;" .. package.path
- end
- -- Wiretap encapsulations XXX
- wtap_encaps = {
- ["PER_PACKET"] = -1,
- ["UNKNOWN"] = 0,
- ["ETHERNET"] = 1,
- ["TOKEN_RING"] = 2,
- ["SLIP"] = 3,
- ["PPP"] = 4,
- ["FDDI"] = 5,
- ["FDDI_BITSWAPPED"] = 6,
- ["RAW_IP"] = 7,
- ["ARCNET"] = 8,
- ["ARCNET_LINUX"] = 9,
- ["ATM_RFC1483"] = 10,
- ["LINUX_ATM_CLIP"] = 11,
- ["LAPB"] = 12,
- ["ATM_PDUS"] = 13,
- ["ATM_PDUS_UNTRUNCATED"] = 14,
- ["NULL"] = 15,
- ["ASCEND"] = 16,
- ["ISDN"] = 17,
- ["IP_OVER_FC"] = 18,
- ["PPP_WITH_PHDR"] = 19,
- ["IEEE_802_11"] = 20,
- ["IEEE_802_11_PRISM"] = 21,
- ["IEEE_802_11_WITH_RADIO"] = 22,
- ["IEEE_802_11_RADIOTAP"] = 23,
- ["IEEE_802_11_AVS"] = 24,
- ["SLL"] = 25,
- ["FRELAY"] = 26,
- ["FRELAY_WITH_PHDR"] = 27,
- ["CHDLC"] = 28,
- ["CISCO_IOS"] = 29,
- ["LOCALTALK"] = 30,
- ["OLD_PFLOG"] = 31,
- ["HHDLC"] = 32,
- ["DOCSIS"] = 33,
- ["COSINE"] = 34,
- ["WFLEET_HDLC"] = 35,
- ["SDLC"] = 36,
- ["TZSP"] = 37,
- ["ENC"] = 38,
- ["PFLOG"] = 39,
- ["CHDLC_WITH_PHDR"] = 40,
- ["BLUETOOTH_H4"] = 41,
- ["MTP2"] = 42,
- ["MTP3"] = 43,
- ["IRDA"] = 44,
- ["USER0"] = 45,
- ["USER1"] = 46,
- ["USER2"] = 47,
- ["USER3"] = 48,
- ["USER4"] = 49,
- ["USER5"] = 50,
- ["USER6"] = 51,
- ["USER7"] = 52,
- ["USER8"] = 53,
- ["USER9"] = 54,
- ["USER10"] = 55,
- ["USER11"] = 56,
- ["USER12"] = 57,
- ["USER13"] = 58,
- ["USER14"] = 59,
- ["USER15"] = 60,
- ["SYMANTEC"] = 61,
- ["APPLE_IP_OVER_IEEE1394"] = 62,
- ["BACNET_MS_TP"] = 63,
- ["NETTL_RAW_ICMP"] = 64,
- ["NETTL_RAW_ICMPV6"] = 65,
- ["GPRS_LLC"] = 66,
- ["JUNIPER_ATM1"] = 67,
- ["JUNIPER_ATM2"] = 68,
- ["REDBACK"] = 69,
- ["NETTL_RAW_IP"] = 70,
- ["NETTL_ETHERNET"] = 71,
- ["NETTL_TOKEN_RING"] = 72,
- ["NETTL_FDDI"] = 73,
- ["NETTL_UNKNOWN"] = 74,
- ["MTP2_WITH_PHDR"] = 75,
- ["JUNIPER_PPPOE"] = 76,
- ["GCOM_TIE1"] = 77,
- ["GCOM_SERIAL"] = 78,
- ["NETTL_X25"] = 79,
- ["K12"] = 80,
- ["JUNIPER_MLPPP"] = 81,
- ["JUNIPER_MLFR"] = 82,
- ["JUNIPER_ETHER"] = 83,
- ["JUNIPER_PPP"] = 84,
- ["JUNIPER_FRELAY"] = 85,
- ["JUNIPER_CHDLC"] = 86,
- ["JUNIPER_GGSN"] = 87,
- ["LINUX_LAPD"] = 88,
- ["CATAPULT_DCT2000"] = 89,
- ["BER"] = 90,
- ["JUNIPER_VP"] = 91,
- ["USB_FREEBSD"] = 92,
- ["IEEE802_16_MAC_CPS"] = 93,
- ["NETTL_RAW_TELNET"] = 94,
- ["USB_LINUX"] = 95,
- ["MPEG"] = 96,
- ["PPI"] = 97,
- ["ERF"] = 98,
- ["BLUETOOTH_H4_WITH_PHDR"] = 99,
- ["SITA"] = 100,
- ["SCCP"] = 101,
- ["BLUETOOTH_HCI"] = 102,
- ["IPMB_KONTRON"] = 103,
- ["IEEE802_15_4"] = 104,
- ["X2E_XORAYA"] = 105,
- ["FLEXRAY"] = 106,
- ["LIN"] = 107,
- ["MOST"] = 108,
- ["CAN20B"] = 109,
- ["LAYER1_EVENT"] = 110,
- ["X2E_SERIAL"] = 111,
- ["I2C_LINUX"] = 112,
- ["IEEE802_15_4_NONASK_PHY"] = 113,
- ["TNEF"] = 114,
- ["USB_LINUX_MMAPPED"] = 115,
- ["GSM_UM"] = 116,
- ["DPNSS"] = 117,
- ["PACKETLOGGER"] = 118,
- ["NSTRACE_1_0"] = 119,
- ["NSTRACE_2_0"] = 120,
- ["FIBRE_CHANNEL_FC2"] = 121,
- ["FIBRE_CHANNEL_FC2_WITH_FRAME_DELIMS"] = 122,
- ["JPEG_JFIF"] = 123,
- ["IPNET"] = 124,
- ["SOCKETCAN"] = 125,
- ["IEEE_802_11_NETMON"] = 126,
- ["IEEE802_15_4_NOFCS"] = 127,
- ["RAW_IPFIX"] = 128,
- ["RAW_IP4"] = 129,
- ["RAW_IP6"] = 130,
- ["LAPD"] = 131,
- ["DVBCI"] = 132,
- ["MUX27010"] = 133,
- ["MIME"] = 134,
- ["NETANALYZER"] = 135,
- ["NETANALYZER_TRANSPARENT"] = 136,
- ["IP_OVER_IB_SNOOP"] = 137,
- ["MPEG_2_TS"] = 138,
- ["PPP_ETHER"] = 139,
- ["NFC_LLCP"] = 140,
- ["NFLOG"] = 141,
- ["V5_EF"] = 142,
- ["BACNET_MS_TP_WITH_PHDR"] = 143,
- ["IXVERIWAVE"] = 144,
- ["SDH"] = 145,
- ["DBUS"] = 146,
- ["AX25_KISS"] = 147,
- ["AX25"] = 148,
- ["SCTP"] = 149,
- ["INFINIBAND"] = 150,
- ["JUNIPER_SVCS"] = 151,
- ["USBPCAP"] = 152,
- ["RTAC_SERIAL"] = 153,
- ["BLUETOOTH_LE_LL"] = 154,
- ["WIRESHARK_UPPER_PDU"] = 155,
- ["STANAG_4607"] = 156,
- ["STANAG_5066_D_PDU"] = 157,
- ["NETLINK"] = 158,
- ["BLUETOOTH_LINUX_MONITOR"] = 159,
- ["BLUETOOTH_BREDR_BB"] = 160,
- ["BLUETOOTH_LE_LL_WITH_PHDR"] = 161,
- ["NSTRACE_3_0"] = 162,
- ["LOGCAT"] = 163,
- ["LOGCAT_BRIEF"] = 164,
- ["LOGCAT_PROCESS"] = 165,
- ["LOGCAT_TAG"] = 166,
- ["LOGCAT_THREAD"] = 167,
- ["LOGCAT_TIME"] = 168,
- ["LOGCAT_THREADTIME"] = 169,
- ["LOGCAT_LONG"] = 170,
- ["PKTAP"] = 171,
- ["EPON"] = 172,
- ["IPMI_TRACE"] = 173,
- ["LOOP"] = 174,
- ["JSON"] = 175,
- ["NSTRACE_3_5"] = 176,
- ["ISO14443"] = 177,
- ["GFP_T"] = 178,
- ["GFP_F"] = 179,
- ["IP_OVER_IB_PCAP"] = 180,
- ["JUNIPER_VN"] = 181,
- ["USB_DARWIN"] = 182,
- ["LORATAP"] = 183,
- ["3MB_ETHERNET"] = 184,
- ["VSOCK"] = 185,
- ["NORDIC_BLE"] = 186,
- ["NETMON_NET_NETEVENT"] = 187,
- ["NETMON_HEADER"] = 188,
- ["NETMON_NET_FILTER"] = 189,
- ["NETMON_NETWORK_INFO_EX"] = 190,
- ["MA_WFP_CAPTURE_V4"] = 191,
- ["MA_WFP_CAPTURE_V6"] = 192,
- ["MA_WFP_CAPTURE_2V4"] = 193,
- ["MA_WFP_CAPTURE_2V6"] = 194,
- ["MA_WFP_CAPTURE_AUTH_V4"] = 195,
- ["MA_WFP_CAPTURE_AUTH_V6"] = 196,
- ["JUNIPER_ST"] = 197,
- ["ETHERNET_MPACKET"] = 198,
- ["DOCSIS31_XRA31"] = 199,
- ["DPAUXMON"] = 200,
- ["RUBY_MARSHAL"] = 201,
- ["RFC7468"] = 202,
- ["SYSTEMD_JOURNAL"] = 203,
- ["EBHSCR"] = 204,
- ["VPP"] = 205,
- ["IEEE802_15_4_TAP"] = 206,
- ["LOG_3GPP"] = 207,
- ["USB_2_0"] = 208,
- ["MP4"] = 209,
- ["SLL2"] = 210,
- ["ZWAVE_SERIAL"] = 211,
- ["ETW"] = 212,
- ["ERI_ENB_LOG"] = 213,
- ["ZBNCP"] = 214,
- ["USB_2_0_LOW_SPEED"] = 215,
- ["USB_2_0_FULL_SPEED"] = 216,
- ["USB_2_0_HIGH_SPEED"] = 217
- }
- wtap = wtap_encaps -- for bw compatibility
- --
- -- Generate the wtap_filetypes items for file types, for backwards
- -- compatibility.
- -- We no longer have WTAP_FILE_TYPE_SUBTYPE_ #defines;
- -- built-in file types are registered the same way that
- -- plugin file types are registered.
- --
- -- New code should use wtap_name_to_file_type_subtype to
- -- look up file types by name.
- --
- wtap_filetypes = get_wtap_filetypes()
- -- Wiretap timestamp precision types
- wtap_tsprecs = {
- ["SEC"] = 0,
- ["DSEC"] = 1,
- ["CSEC"] = 2,
- ["MSEC"] = 3,
- ["USEC"] = 6,
- ["NSEC"] = 9
- }
- -- Wiretap file comment types
- wtap_comments = {
- ["PER_SECTION"] = 0x00000001,
- ["PER_INTERFACE"] = 0x00000002,
- ["PER_PACKET"] = 0x00000004
- }
- -- Field Types
- ftypes = {
- ["NONE"] = 0,
- ["PROTOCOL"] = 1,
- ["BOOLEAN"] = 2,
- ["CHAR"] = 3,
- ["UINT8"] = 4,
- ["UINT16"] = 5,
- ["UINT24"] = 6,
- ["UINT32"] = 7,
- ["UINT40"] = 8,
- ["UINT48"] = 9,
- ["UINT56"] = 10,
- ["UINT64"] = 11,
- ["INT8"] = 12,
- ["INT16"] = 13,
- ["INT24"] = 14,
- ["INT32"] = 15,
- ["INT40"] = 16,
- ["INT48"] = 17,
- ["INT56"] = 18,
- ["INT64"] = 19,
- ["IEEE_11073_SFLOAT"] = 20,
- ["IEEE_11073_FLOAT"] = 21,
- ["FLOAT"] = 22,
- ["DOUBLE"] = 23,
- ["ABSOLUTE_TIME"] = 24,
- ["RELATIVE_TIME"] = 25,
- ["STRING"] = 26,
- ["STRINGZ"] = 27,
- ["UINT_STRING"] = 28,
- ["ETHER"] = 29,
- ["BYTES"] = 30,
- ["UINT_BYTES"] = 31,
- ["IPv4"] = 32,
- ["IPv6"] = 33,
- ["IPXNET"] = 34,
- ["FRAMENUM"] = 35,
- ["GUID"] = 36,
- ["OID"] = 37,
- ["EUI64"] = 38,
- ["AX25"] = 39,
- ["VINES"] = 40,
- ["REL_OID"] = 41,
- ["SYSTEM_ID"] = 42,
- ["STRINGZPAD"] = 43,
- ["FCWWN"] = 44,
- ["STRINGZTRUNC"] = 45,
- ["OVERFLOW"] = 46,
- ["BADARG"] = 47,
- ["ERROR"] = 48
- }
- -- the following table is since 2.0
- -- Field Type FRAMENUM Types
- frametype = {
- ["NONE"] = 0,
- ["REQUEST"] = 1,
- ["RESPONSE"] = 2,
- ["ACK"] = 3,
- ["DUP_ACK"] = 4,
- ["RETRANS_PREV"] = 5,
- ["RETRANS_NEXT"] = 6
- }
- -- the following table is since 1.12
- -- Wiretap record_types
- wtap_rec_types = {
- ["PACKET"] = 0, -- packet
- ["FT_SPECIFIC_EVENT"] = 1, -- file-type-specific event
- ["FT_SPECIFIC_REPORT"] = 2, -- file-type-specific report
- ["SYSCALL"] = 3, -- system call
- ["SYSTEMD_JOURNAL_EXPORT"] = 4, -- systemd journal entry
- ["CUSTOM_BLOCK"] = 5, -- pcapng custom block
- }
- -- the following table is since 1.11.3
- -- Wiretap presence flags
- wtap_presence_flags = {
- ["TS"] = 1, -- time stamp
- ["CAP_LEN"] = 2, -- captured length separate from on-the-network length
- ["INTERFACE_ID"] = 4, -- interface ID
- ["SECTION_NUMBER"] = 8, -- section number
- }
- -- Display Bases
- base = {
- ["NONE"] = 0, -- none
- ["DEC"] = 1, -- decimal [integer, float]
- ["HEX"] = 2, -- hexadecimal [integer, float]
- ["OCT"] = 3, -- octal [integer]
- ["DEC_HEX"] = 4, -- decimal (hexadecimal) [integer]
- ["HEX_DEC"] = 5, -- hexadecimal (decimal) [integer]
- ["CUSTOM"] = 6, -- call custom routine to format [integer, float]
- ["EXP"] = 7, -- exponential [float]
- ["DOT"] = 8, -- hexadecimal bytes with a period (.) between each byte
- ["DASH"] = 9, -- hexadecimal bytes with a dash (-) between each byte
- ["COLON"] = 10, -- hexadecimal bytes with a colon (:) between each byte
- ["SPACE"] = 11, -- hexadecimal bytes with a space between each byte
- ["NETMASK"] = 12, -- Used for IPv4 address that shouldn't be resolved (like for netmasks)
- ["PT_UDP"] = 13, -- UDP port
- ["PT_TCP"] = 14, -- TCP port
- ["PT_DCCP"] = 15, -- DCCP port
- ["PT_SCTP"] = 16, -- SCTP port
- ["OUI"] = 17, -- OUI resolution
- ["LOCAL"] = 18, -- local time in our time zone, with month and day
- ["UTC"] = 19, -- UTC, with month and day
- ["DOY_UTC"] = 20, -- UTC, with 1-origin day-of-year
- ["NTP_UTC"] = 21, -- UTC, with "NULL" when timestamp is all zeros
- ["RANGE_STRING"] = 256, -- Use the supplied range string to convert the field to text
- ["UNIT_STRING"] = 4096, -- Add unit text to the field value
- }
- -- Encodings
- ENC_BIG_ENDIAN = 0
- ENC_LITTLE_ENDIAN = 2147483648
- ENC_NA = 0
- ENC_CHARENCODING_MASK = 65534
- ENC_ASCII = 0
- ENC_ISO_646_IRV = 14
- ENC_UTF_8 = 2
- ENC_UTF_16 = 4
- ENC_UCS_2 = 6
- ENC_UCS_4 = 8
- ENC_ISO_8859_1 = 10
- ENC_ISO_8859_2 = 12
- ENC_ISO_8859_3 = 14
- ENC_ISO_8859_4 = 16
- ENC_ISO_8859_5 = 18
- ENC_ISO_8859_6 = 20
- ENC_ISO_8859_7 = 22
- ENC_ISO_8859_8 = 24
- ENC_ISO_8859_9 = 26
- ENC_ISO_8859_10 = 28
- ENC_ISO_8859_11 = 30
- ENC_ISO_8859_13 = 34
- ENC_ISO_8859_14 = 36
- ENC_ISO_8859_15 = 38
- ENC_ISO_8859_16 = 40
- ENC_WINDOWS_1250 = 42
- ENC_3GPP_TS_23_038_7BITS_PACKED = 44
- ENC_3GPP_TS_23_038_7BITS = 14
- ENC_EBCDIC = 46
- ENC_MAC_ROMAN = 48
- ENC_CP437 = 50
- ENC_ASCII_7BITS = 52
- ENC_T61 = 54
- ENC_EBCDIC_CP037 = 56
- ENC_WINDOWS_1252 = 58
- ENC_WINDOWS_1251 = 60
- ENC_CP855 = 62
- ENC_CP866 = 64
- ENC_ISO_646_BASIC = 66
- ENC_BCD_DIGITS_0_9 = 68
- ENC_KEYPAD_ABC_TBCD = 70
- ENC_KEYPAD_BC_TBCD = 72
- ENC_3GPP_TS_23_038_7BITS_UNPACKED = 76
- ENC_ETSI_TS_102_221_ANNEX_A = 78
- ENC_GB18030 = 80
- ENC_EUC_KR = 82
- ENC_APN_STR = 84
- ENC_ZIGBEE = 1073741824
- ENC_STR_NUM = 16777216
- ENC_STR_HEX = 33554432
- ENC_STRING = 50331648
- ENC_STR_MASK = 65534
- ENC_NUM_PREF = 2097152
- ENC_SEP_NONE = 65536
- ENC_SEP_COLON = 131072
- ENC_SEP_DASH = 262144
- ENC_SEP_DOT = 524288
- ENC_SEP_SPACE = 1048576
- ENC_SEP_MASK = 2031616
- ENC_BCD_ODD_NUM_DIG = 65536
- ENC_BCD_SKIP_FIRST = 131072
- ENC_TIME_SECS_NSECS = 0
- ENC_TIME_TIMESPEC = 0
- ENC_TIME_NTP = 2
- ENC_TIME_TOD = 4
- ENC_TIME_RTPS = 8
- ENC_TIME_NTP_BASE_ZERO = 8
- ENC_TIME_SECS_USECS = 16
- ENC_TIME_TIMEVAL = 16
- ENC_TIME_SECS = 18
- ENC_TIME_MSECS = 20
- ENC_TIME_SECS_NTP = 24
- ENC_TIME_RFC_3971 = 32
- ENC_TIME_MSEC_NTP = 34
- ENC_TIME_MIP6 = 36
- ENC_TIME_CLASSIC_MAC_OS_SECS = 38
- ENC_TIME_NSECS = 40
- ENC_TIME_USECS = 48
- ENC_ISO_8601_DATE = 65536
- ENC_ISO_8601_TIME = 131072
- ENC_ISO_8601_DATE_TIME = 196608
- ENC_RFC_822 = 262144
- ENC_RFC_1123 = 524288
- ENC_ISO_8601_DATE_TIME_BASIC = 1048576
- ENC_STR_TIME_MASK = 2031616
- ENC_VARINT_PROTOBUF = 2
- ENC_VARINT_QUIC = 4
- ENC_VARINT_ZIGZAG = 8
- -- Expert flags and facilities (deprecated - see 'expert' table below)
- PI_SEVERITY_MASK = 15728640
- PI_COMMENT = 1048576
- PI_CHAT = 2097152
- PI_NOTE = 4194304
- PI_WARN = 6291456
- PI_ERROR = 8388608
- PI_GROUP_MASK = 4278190080
- PI_CHECKSUM = 16777216
- PI_SEQUENCE = 33554432
- PI_RESPONSE_CODE = 50331648
- PI_REQUEST_CODE = 67108864
- PI_UNDECODED = 83886080
- PI_REASSEMBLE = 100663296
- PI_MALFORMED = 117440512
- PI_DEBUG = 134217728
- PI_PROTOCOL = 150994944
- PI_SECURITY = 167772160
- PI_COMMENTS_GROUP = 184549376
- PI_DECRYPTION = 201326592
- PI_ASSUMPTION = 218103808
- PI_DEPRECATED = 234881024
- -- the following table is since 1.11.3
- -- Expert flags and facilities
- expert = {
- -- Expert event groups
- group = {
- -- The protocol field has a bad checksum, usually uses PI_WARN severity
- ["CHECKSUM"] = 16777216,
- -- The protocol field indicates a sequence problem (e.g. TCP window is zero)
- ["SEQUENCE"] = 33554432,
- -- The protocol field indicates a bad application response code (e.g. HTTP 404), usually PI_NOTE severity
- ["RESPONSE_CODE"] = 50331648,
- -- The protocol field indicates an application request (e.g. File Handle == xxxx), usually PI_CHAT severity
- ["REQUEST_CODE"] = 67108864,
- -- The data is undecoded, the protocol dissection is incomplete here, usually PI_WARN severity
- ["UNDECODED"] = 83886080,
- -- The protocol field indicates a reassemble (e.g. DCE/RPC defragmentation), usually PI_CHAT severity (or PI_ERROR)
- ["REASSEMBLE"] = 100663296,
- -- The packet data is malformed, the dissector has "given up", usually PI_ERROR severity
- ["MALFORMED"] = 117440512,
- -- A generic debugging message (shouldn't remain in production code!), usually PI_ERROR severity
- ["DEBUG"] = 134217728,
- -- The protocol field violates a protocol specification, usually PI_WARN severity
- ["PROTOCOL"] = 150994944,
- -- The protocol field indicates a security problem (e.g. insecure implementation)
- ["SECURITY"] = 167772160,
- -- The protocol field indicates a packet comment
- ["COMMENTS_GROUP"] = 184549376,
- -- The protocol field indicates a decryption problem
- ["DECRYPTION"] = 201326592,
- -- The protocol field has incomplete data, decode based on assumed value
- ["ASSUMPTION"] = 218103808,
- -- The protocol field has been deprecated, usually PI_NOTE severity
- ["DEPRECATED"] = 234881024,
- },
- -- Expert severity levels
- severity = {
- -- Packet comment
- ["COMMENT"] = 1048576,
- -- Usual workflow, e.g. TCP connection establishing
- ["CHAT"] = 2097152,
- -- Notable messages, e.g. an application returned an "unusual" error code like HTTP 404
- ["NOTE"] = 4194304,
- -- Warning, e.g. application returned an "unusual" error code
- ["WARN"] = 6291456,
- -- Serious problems, e.g. a malformed packet
- ["ERROR"] = 8388608,
- },
- }
- -- menu groups for register_menu
- MENU_PACKET_ANALYZE_UNSORTED = 0
- MENU_ANALYZE_CONVERSATION_FILTER = 1
- MENU_PACKET_STAT_UNSORTED = 2
- MENU_STAT_GENERIC = 3
- MENU_STAT_CONVERSATION_LIST = 4
- MENU_STAT_ENDPOINT_LIST = 5
- MENU_STAT_RESPONSE_TIME = 6
- MENU_STAT_RSERPOOL = 7
- MENU_STAT_TELEPHONY = 8
- MENU_STAT_TELEPHONY_ANSI = 9
- MENU_STAT_TELEPHONY_GSM = 10
- MENU_STAT_TELEPHONY_LTE = 11
- MENU_STAT_TELEPHONY_MTP3 = 12
- MENU_STAT_TELEPHONY_SCTP = 13
- MENU_TOOLS_UNSORTED = 14
- MENU_LOG_ANALYZE_UNSORTED = 15
- MENU_LOG_STAT_UNSORTED = 16
- -- Old / deprecated menu groups. These shoudn't be used in new code.
- MENU_ANALYZE_UNSORTED = MENU_PACKET_ANALYZE_UNSORTED
- MENU_ANALYZE_CONVERSATION = MENU_ANALYZE_CONVERSATION_FILTER
- MENU_STAT_CONVERSATION = MENU_STAT_CONVERSATION_LIST
- MENU_STAT_ENDPOINT = MENU_STAT_ENDPOINT_LIST
- MENU_STAT_RESPONSE = MENU_STAT_RESPONSE_TIME
- MENU_STAT_UNSORTED = MENU_PACKET_STAT_UNSORTED
- -- the possible values for Pinfo's p2p_dir attribute
- P2P_DIR_UNKNOWN = -1
- P2P_DIR_SENT = 0
- P2P_DIR_RECV = 1
- -- other useful constants
- -- DATA_DIR and USER_DIR have a trailing directory separator.
- GUI_ENABLED = gui_enabled()
- DATA_DIR = Dir.global_config_path()..package.config:sub(1,1)
- USER_DIR = Dir.personal_config_path()..package.config:sub(1,1)
- -- deprecated function names
- datafile_path = Dir.global_config_path
- persconffile_path = Dir.personal_config_path
- if not running_superuser or run_user_scripts_when_superuser then
- dofile(DATA_DIR.."console.lua")
- end
- --dofile(DATA_DIR.."dtd_gen.lua")
|